This week, two bills made their way through Congress that should be on every procurement leader’s radar.

The Export Control Enforcement and Enhancement Act, introduced by Rep. Ann Wagner, would give the Departments of State, Defense, and Energy the ability to rapidly modify the Commerce Department’s Entity List, which is the roster of foreign governments, companies, and research institutions deemed national security risks. Under this proposal, additions, removals, and modifications could happen within a 30-day window. Separately, a bipartisan cybersecurity apprenticeship bill aims to close a 500,000-plus vacancy gap in the U.S. cyber workforce, reinforcing the continued federal emphasis on organizations demonstrating strong cyber hygiene across their supply chains.

What this means for aerospace, defense, and federal contractors

The Entity List has always been a compliance consideration, but a 30-day modification window changes the calculus considerably. A supplier that passes vetting today could appear on a restricted list next month, and if your team discovers that after the fact, you are looking at a contract risk, a compliance problem, and potentially a program delay all at once. For companies selling into the federal government, the bar is no longer simply whether direct suppliers are compliant. It is whether you have sufficient real-time visibility into the inner workings of every supplier to avoid being caught off guard when the rules shift quickly.

What procurement and supply chain teams should do to prepare

  • Move from periodic to continuous entity list monitoring. With a potentially faster update cycle on the horizon, annual or quarterly reviews are no longer sufficient. Automated, ongoing monitoring needs to become the operational standard.
  • Understand the ownership structures of your suppliers. Shell companies and layered ownership arrangements are a well-documented tactic for circumventing export controls. Beneficial ownership visibility is an increasingly important part of any robust supplier risk program.
  • Assign ownership for tracking regulatory changes across your procurement team. As the pace of export control updates increases, someone needs to be responsible for translating new legislation into supplier requirements before a compliance gap quietly becomes a contractual one.
  • Establish clear lines of communication with your suppliers about regulatory obligations. When the Entity List changes or new restrictions take effect, your suppliers need to understand how those changes affect your relationship and what you will expect from them in response.

The pace of regulatory change in national security technology is accelerating, and the companies that continue to win federal business in this environment will be the ones who can demonstrate that their supply chains are clean, resilient, and continuously monitored. At Craft.co, we help aerospace, defense, and federal contractors stay ahead of exactly these challenges with the supplier intelligence and monitoring capabilities needed to keep supply chains compliant as legislation evolves.